Dynamic address configuration is the simplest solution. Simply just setup a DHCP consumer on the public interface. The very first rule accepts packets from previously proven connections, assuming These are Secure not to overload the CPU. The next rule drops any packet that relationship tracking i